Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1366f858-4a2a-31d8-a81d-5a95de7d5974.roa
File:                     1366f858-4a2a-31d8-a81d-5a95de7d5974.roa (raw, json)
Hash identifier:          SIelLXKhaWBP1M+83wl85uzzQxzwMolS+c0yfVWC0e0=
Subject key identifier:   7D:8D:B6:C4:AF:7E:AD:EB:DB:39:75:62:3A:59:4A:8C:59:6B:38:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8623C3E3FD4AA433F184198
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1366f858-4a2a-31d8-a81d-5a95de7d5974.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        66.30.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:3c:3e:3f:d4:aa:43:3f:18:41:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=740f9ec3-f3df-4b68-bbbb-f482d16e9ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:1a:9d:d7:59:92:21:04:2a:d8:58:4a:b4:
                    21:23:7e:4e:11:2c:44:5e:70:be:f8:80:13:0d:c1:
                    dd:dc:4c:44:73:56:8a:4a:1c:95:71:f4:31:6f:07:
                    8d:8e:64:d9:f6:c2:80:13:26:75:63:fd:17:9c:88:
                    53:41:8b:ee:6f:bf:bf:2b:e2:74:a5:6c:40:c9:a3:
                    ae:c8:b8:dc:86:7d:4d:12:54:78:34:d8:9e:c6:9e:
                    c2:46:6d:b9:a8:5b:4f:ed:43:23:81:5e:71:64:4a:
                    db:1b:c8:79:18:b2:b8:13:ca:b4:bb:56:50:9c:9b:
                    0d:e9:23:13:c4:5d:e3:13:65:b9:c6:88:70:63:e5:
                    68:ce:b1:13:1d:c7:f0:b2:d2:8a:c0:e9:2d:10:c9:
                    11:a3:47:78:96:43:d5:25:89:13:32:4a:5e:15:e5:
                    b9:bf:e4:99:71:c0:26:26:c2:c6:f3:31:8d:5e:1d:
                    50:9a:81:cf:ba:86:01:cd:54:0c:b7:15:40:b9:14:
                    57:a7:ec:a5:e1:ed:b0:c0:2c:c8:32:56:56:dc:82:
                    bc:0b:a4:01:fd:18:fb:58:c0:ed:20:6b:b6:ab:32:
                    78:e9:82:ec:77:70:1e:43:26:82:a6:b1:5f:d0:40:
                    d5:a9:1f:39:3f:fe:ce:c7:a4:92:05:db:cf:ce:b4:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:B6:C4:AF:7E:AD:EB:DB:39:75:62:3A:59:4A:8C:59:6B:38:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1366f858-4a2a-31d8-a81d-5a95de7d5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:48:90:2f:10:a6:e5:85:5b:f0:ec:36:da:a1:34:98:e1:52:
         94:70:36:66:69:a0:20:34:b3:e7:04:42:d3:f2:99:e8:4a:75:
         93:e5:3e:9b:f7:bb:fc:d3:cb:97:c8:96:5b:a4:d7:24:7a:f4:
         fc:cf:e4:80:6f:cd:84:eb:47:e1:1b:9f:a4:c4:56:b6:bd:12:
         8d:28:91:8b:1e:7d:96:8c:1b:a1:0d:3e:c1:81:f1:e1:53:29:
         7a:4e:80:b1:6b:64:23:6c:99:d3:32:ac:c4:7c:0a:61:72:33:
         bb:2c:8c:70:de:8e:38:04:37:25:1e:22:0a:d8:cc:8a:d5:d0:
         65:3e:62:ba:bf:7b:11:e3:45:61:14:e4:d3:6a:69:7c:e7:3b:
         c2:28:f2:28:63:6f:3a:b2:e4:b2:2c:df:00:f3:6a:ff:90:75:
         ce:c4:81:04:fc:2f:27:5f:41:ed:c6:5e:bb:61:60:fc:ba:56:
         e5:cc:c2:82:87:d9:90:9e:06:6a:45:4d:14:94:4b:71:21:c2:
         71:f5:c1:06:25:38:52:b9:b2:4d:29:e3:f3:93:6f:45:db:e7:
         f0:a8:f7:bb:dd:65:16:e6:21:1d:47:89:57:7b:aa:9f:e8:ff:
         b9:70:5a:19:01:bc:d3:b6:2d:53:42:34:e1:7a:32:66:38:4d:
         23:af:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:43:42 2026 by rpki-client